Privacy Policy

This Privacy Policy applies to Viking MMA, a trading name of Wayne Luke Cummins (ABN 54 580 655 609), located at 3/39 Liamena Avenue, San Remo NSW 2259, Australia (“we”, “us”, “the gym”).

We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, and the rights you have over it.

We only collect what we need to run the gym and your membership:

• Identity & contact — name, email address and phone number when you create an account, book a class, or contact us.
• Account credentials — your password is stored only as a one-way hash; nobody at the gym can read it.
• Membership & payment records — the plans you choose, billing cycle, amounts due and paid, payment method (bank transfer, cash or card), and class-pass usage.
• Bank details — if you opt in to direct debit, your BSB and account number. These are stored securely and accessed only to process your agreed membership payments.
• Bookings & attendance — the classes you book, attend or cancel.
• Children’s information — for kids memberships (ages 5–12), the child’s first name and class attendance, provided by a parent or guardian.
• Communications — emails you send us, and our service emails to you (booking confirmations, receipts, renewal reminders).

We do not collect government identifiers, health information, or payment card numbers through this website. Sensitive information is only collected if you choose to tell us (for example, an injury the coaches should know about) — please share that in person rather than by email where possible.

• Running your membership — billing cycles, payments, pauses and cancellations.
• Managing class bookings, capacity and attendance.
• Sending service emails your account generates (confirmations, receipts, due reminders).
• Occasional gym news and offers, where you have an account with us — you can opt out any time by emailing us.
• Keeping you and the community safe — attendance records help us manage class sizes and emergencies.
• Improving the website (anonymous, aggregated usage patterns only).

We will never sell your personal information, and we never use it for unrelated third-party marketing.

We share the minimum necessary with the trusted services that operate this website and our emails:

• Vercel (website hosting) and Turso (database hosting) — data may be processed and stored on servers in Australia, the United States and Japan. Where information goes overseas, we take reasonable steps to ensure it is handled consistently with the APPs (APP 8).
• Resend — delivers our transactional email (bookings, receipts, password resets) using our verified domain.
• Payment providers — if online card payments are enabled, the card processor handles card details; we never see or store your card number.

We may also disclose information where the law requires it, or to protect the safety of any person.

Personal information is stored in access-controlled databases, transferred over encrypted connections (HTTPS/TLS), and limited to what the gym needs. Passwords are hashed with a salted one-way function. Access to member records is restricted to the gym operator.

If a data breach occurs that is likely to cause serious harm, we will notify affected members and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

This site uses only essential cookies — the signed session cookies that keep you signed in to your member or admin account. There is no advertising, no cross-site tracking, and no analytics cookie. You can block cookies in your browser, but you will not be able to sign in.

You can:

• Access the personal information we hold about you — most of it is visible in your account pages; anything else, just ask.
• Correct it — update your name and phone in your profile, or email us for anything else.
• Delete your account — email us and we will remove your profile and contact details. Financial records required for tax and accounting law are kept for the period the law requires, then destroyed.
• Opt out of non-essential emails at any time.

To exercise any of these rights, email info@vikingmma.com.au. We will respond within a reasonable time (and within 30 days for privacy requests).

If you believe we have mishandled your personal information, please contact us first at info@vikingmma.com.au so we can fix it. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992

We may update this policy as the site or the law changes. The “last updated” date above shows the current version, and material changes will be announced by email or a notice on the site.